Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:6265' (ECDSA) to the list of known hosts.
2025/04/29 12:51:48 fuzzer started
2025/04/29 12:51:49 dialing manager at localhost:36753
syzkaller login: [   94.671253] cgroup: Unknown subsys name 'net'
[   94.809207] cgroup: Unknown subsys name 'cpuset'
[   94.847483] cgroup: Unknown subsys name 'rlimit'
2025/04/29 12:52:03 syscalls: 212
2025/04/29 12:52:03 code coverage: enabled
2025/04/29 12:52:03 comparison tracing: enabled
2025/04/29 12:52:03 extra coverage: enabled
2025/04/29 12:52:03 setuid sandbox: enabled
2025/04/29 12:52:03 namespace sandbox: enabled
2025/04/29 12:52:03 Android sandbox: enabled
2025/04/29 12:52:03 fault injection: enabled
2025/04/29 12:52:03 leak checking: enabled
2025/04/29 12:52:03 net packet injection: enabled
2025/04/29 12:52:03 net device setup: enabled
2025/04/29 12:52:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/29 12:52:03 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/29 12:52:03 USB emulation: enabled
2025/04/29 12:52:03 hci packet injection: enabled
2025/04/29 12:52:03 wifi device emulation: enabled
2025/04/29 12:52:03 802.15.4 emulation: enabled
2025/04/29 12:52:03 fetching corpus: 0, signal 0/0 (executing program)
2025/04/29 12:52:05 starting 8 fuzzer processes
12:52:05 executing program 0:
ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x1, 0x2, 0x69, 0x200000, 0xfffffff9, 0x2b})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000040)={0x8001, 0x6, 0x1, 'queue1\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000100)={{0x3f, 0x7}, 'port1\x00', 0x62, 0x1, 0x80000000, 0x7, 0xfffffffa, 0x3, 0x245b88b4, 0x0, 0x1, 0x4})
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x7ef000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000200))
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000240)={0x4, 0xb2, 0x1, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000300)={0x10000, 0x2, {0x2, 0x0, 0x41c, 0x2, 0x9}, 0xd08a9e8})
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000003c0)={0x7, 0x8, 0x0, 'queue1\x00', 0x99})
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x4)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0xbed)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480))
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0x600100, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f00000006c0))
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
read$usbmon(r0, &(0x7f0000000700)=""/168, 0xa8)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000007c0)={{0x7, 0x5}, {0x1, 0x40}, 0x0, 0x3, 0x4})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x208000)

12:52:05 executing program 1:
r0 = msgget(0x0, 0x142)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/212)
r1 = msgget(0x0, 0x242)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000100)=""/125)
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/4096)
setfsuid(0x0)
msgctl$IPC_RMID(r0, 0x0)
setfsuid(0xffffffffffffffff)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x1, 0x410)
msgctl$MSG_STAT(r2, 0xb, &(0x7f0000001180)=""/40)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000001200)={0x3, 0x2, 0xa4})
r4 = getuid()
setfsuid(r4)
msgget(0x0, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000001240), 0x2000, 0x0)
r5 = msgget(0x2, 0x3)
msgctl$MSG_INFO(r5, 0xc, &(0x7f0000001280)=""/168)
ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000001340)={0x3, 0x200, 0x80000000})

12:52:05 executing program 2:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xcca7, 0x2000)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xf81f)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0xffffffff})
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000080))
ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f00000000c0)={0x2, 0x200, 0x10000, 0x6, 0x5, 0x20, 0x200, 0x9, 0x1, 0x6, 0x401, 0xa2, 0x9, 0x7})
syz_emit_ethernet(0xee, &(0x7f0000000100)={@remote, @local, @val={@val={0x9100, 0x6, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@llc={0x4, {@snap={0xaa, 0x0, "9e66", "9a59bb", 0x6003, "ceb36a642dbd943fa3cde1d10071fd40fa5ab631757eb94fb88134ab706dc1fc6ee696f82a7253fb562c9e034a20d9243e8bda928232f3caaf508b1681a886a388d83c3e665aa0448598b9fc4786294d881688478d9811da98d4672b20f52ed5d1af704699dcebb0078895128fa4ae0d901bf4f7b4ad48b88bcd1535c25f7394ec761c24af8938c61baf6d8297bf850b79c63c5f416bb8baf568d455ef051f2c79c3217dd06433b8f4bfcb884cd9168271305295b847cb1d392afd8d82ecb331e4eaec12323e3212e53409ae9de806"}}}}}, 0x0)
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x22f0}, @void, @ipv6=@icmpv6={0x8, 0x6, "006f1e", 0x30e, 0x3a, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, {[@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x6, 0x64}], @pkt_toobig={0x2, 0x0, 0x0, 0xffffffff, {0xf, 0x6, "9d8e61", 0x0, 0x6c, 0x0, @empty, @empty, [@routing={0x3b, 0x6, 0x1, 0xfd, 0x0, [@mcast2, @mcast1, @remote]}, @fragment={0x6, 0x0, 0x3, 0x0, 0x0, 0x6, 0x64}, @routing={0x3b, 0x2, 0x2, 0x9, 0x0, [@private1]}, @routing={0x5e, 0x10, 0x3, 0x90, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @loopback, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @private0]}, @dstopts={0x5e, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x59}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x1f, 0xe9, "0aa722a21bc5e5f9e62ca6733b3923a8888668f13076471e169674393a7eaba5f5233e9fa873e5849e813d96fc6e9b072ddf8a72aa66790110655270b1e6345020285cf803a46c37dd06b42c8646b7139c46238857df790dac6dc8715a58a6f05a621a0b0072670d477cb4ed7d91813ee10ca8281e7f2ea8083494d5987382c789677dca0a4d15ae9a46103014be8cff77218118168e6c9930815c4ecbb5a00f9cc96ea82adb479677b705d00e216e30d10a0108365bf82cc996ccf0213285a15b6680db2a7cdbb019a6b069ba74ba1dfcbdac5d044672ae5e98af2d7a7a6ff551f2765807c492dd74"}]}], "b38a64f4c847f64049966fbc69d41e9eec393dc049bfcb7dcfe0accd60123e1715336794cbd4f7b954e14dd8ca2defda435c414b62f343bb83f326dfbbdad76a244a5b8c6edc2f20470ef080f64c9dca3cb20e6c11121d2285457142bfa7a265c18ff40deb29b443344b7f59972b81271cb811e0b61d798bfa049d81eb8e4ee9c53842b3506faf075f823f0da4cc33e420224c782ad8936bee633eeb2907f2d12236c5f60cbdb2d42c9ce86f4593c3633c1859a769bdd3bbcc52806ef890a16ab7b3c2b44df9324c28c17fa28fa0f3c7d556de1ce4e0"}}}}}, 0x33a)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000580)=0x3)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000005c0)={0xffffffff, 0xffffffff, 0x9})
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000600)={0x3, 0x100, 0x9, 0x4, 0x40, 0x8001})
r1 = syz_open_dev$hiddev(&(0x7f0000000640), 0x1, 0x125000)
ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000680))
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000006c0)={0x1, 0x1, 0x800})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0)
write$tun(r2, &(0x7f0000000740)={@void, @val={0x0, 0x3, 0x34b, 0xf275, 0x2, 0x100}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @empty, @multicast, @multicast2}}, 0x26)
r3 = syz_open_dev$hiddev(&(0x7f0000000780), 0xa5, 0x100)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000007c0)=0x1)
read$hiddev(0xffffffffffffffff, &(0x7f0000000840)=""/29, 0x1d)

12:52:05 executing program 3:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xfff, 0xc00)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000080)={0x1, 0x200, 0x4, 0xffff, 0x0, 0x10001})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
write$tun(r1, &(0x7f0000000100)={@void, @void, @ipv6=@udp={0x7, 0x6, "f1074a", 0x234, 0x11, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x88, 0x0, '\x00', [@ra={0x5, 0x2, 0xfff}]}, @srh={0x87, 0xa, 0x4, 0x5, 0x5, 0x44, 0x2, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @dstopts={0x8, 0x12, '\x00', [@generic={0xff, 0x93, "77239e6402c954c942b86802ee2ba4cb8c47ed654ec520798ea9e11457a4b38a5bc534a61f886851d82eb3a88d4d5705662dd85625ab2047d9d4c7553374b724babf8cf713a7aabeaf0fba01f208c55b4a76c78ab83af758f5cb35babca28bd408ea83f665d03d074c0ebbc16661cc0b2e9045a4dd67f494720d57397efac94dda25088ec65255941a6e5a31877e5106d066b5"}]}, @srh={0x3c, 0x8, 0x4, 0x4, 0x7, 0x40, 0x3, [@mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private2]}, @routing={0x4, 0x6, 0x1, 0x46, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x16, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @enc_lim]}], {0x4e24, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "202c3fd495178a90978144830f8da3c23c4436a08c2611a6ba9e9804c3cd6bc4", "b09cbb5c7fd7756f01a01e76e095e2bd0719b4629cec057b84def43fc28b18a6bfeacdba49ec950ed351dea6861aa40f", "9405d22c9b5c1e9aee84a6231aa6d8e24f0d9563050715a90962de11", {"57fec0a0181cbc6dc1d17c1251b780fc", "93ced4fc6736eac411c25a01a722e8d6"}}}}}}, 0x25c)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000003c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000600)=r2)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40001, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x101d02, 0x0)
ioctl$RTC_UIE_OFF(r4, 0x7004)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000006c0)=[@window={0x3, 0x0, 0xe43}, @timestamp, @sack_perm, @timestamp, @timestamp], 0x5)
ioctl$RTC_VL_CLR(r3, 0x7014)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x181801, 0x0)
ioctl$HIDIOCGPHYS(r5, 0x80404812, &(0x7f0000000740))
ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000780))
r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0)
ioctl$MON_IOCQ_URB_LEN(r6, 0x9201)

[  110.842020] audit: type=1400 audit(1745931125.660:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:52:05 executing program 4:
read$snapshot(0xffffffffffffffff, &(0x7f0000000000)=""/143, 0x8f)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10000000, 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x59)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "d8974b1b5f37d2d3", "5198d8f50aa3ebc7fcd9f8944754bacd54ae0adb4a6f61b3e56a7b47b1808738", "6cacc01a", "4570dae17c1a9392"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x5aa3, 0x6, 0x7, 0x7}, 0x14)
r1 = syz_open_dev$hiddev(&(0x7f0000000280), 0x1000, 0x80000)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"30e67d60d06df3db89f6cc7c5b71ff7b", 0x0, <r2=>0x0, {0x0, 0x800}, {0x8bf, 0xc6}, 0x1, [0x8, 0x2, 0x4, 0x3, 0x2, 0x1, 0x7ff, 0x900b, 0x8cd, 0x5, 0x2, 0x487e, 0xfae5, 0x3, 0x3, 0x200]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000003c0)={"795ea7fa7768c5fabfd5e8bbdc6e2d04", 0x0, r2, {0x59f9, 0x8}, {0xe65, 0x9}, 0x8001, [0xffffffffd3cfef19, 0xd2, 0x7, 0x7, 0x80000001, 0x2, 0x6, 0x7fffffff, 0x6, 0x800, 0x9, 0x385, 0x9, 0x1, 0xfa, 0x80000000]})
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x173fd147b1156028}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041000}, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000600)=@gcm_128={{0x304}, "359c12ddae41b02d", "9880ba6f8cc1b1f13da33038460cb38a", "621d2a21", "ab514ad9643350b0"}, 0x28)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000640)={0x3, 0xe7728ed134415367, 0x6, 0x8, 0x9, 0x1})
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000680))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000006c0))
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x6)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000740)="1ddc92b7859ac4e74bceda2208c20b1dfe9ef6ce4319a92dd60fdb65c7c0480591415157a56a21ab15ce51e34e7bef4f18d5e7046a2da9797f28559b2695c3824f9cea7f98b0bae2b6c88e169667dc473f2ac11597e695572409c46c066a403e6ca7ebfcd1f441efd4d6596f206f86d09a98f2e787768c0d03734e0c38bb56c78d768dc7ec9249baf0b763af30081cbd4b9c94c0271685bc65751ba4bb89862cc12ae46d945cc40fb33efd8ff1c4a5abe3f11c7c2cc05a55b62c814e3f4087be0672474eeaddd761ccd7b68dbb6bf0a8b36928d8b126cebd1c403fe69df362c4dcff19ad18fa4b8ddfa407b099608b72c3d3efef", 0xf4)

12:52:05 executing program 5:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/194, &(0x7f0000000140)=0xc2)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000180)={{0x0, 0xfffffffffffffc00, 0x70, 0x6, 0x9, 0x400, 0x3, 0x7fffffff, 0x0, 0x4, 0x26, 0x9, 0x401, 0x5, 0x7fff}})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='mountinfo\x00')
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001200)='yeah\x00', 0x5)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000001240))
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001280), &(0x7f00000012c0)=0x14)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001300), 0x48800, 0x0)
ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000001340)={0x3, 0xffffffff, 0x7, 0x401, 0x1, 0x104a})
ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001380)={0x1, 0x3, 0x3f})
ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x20)
mount_setattr(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x1880, &(0x7f0000001400)={0x1000cb, 0x100000, 0xa0000}, 0x20)

12:52:05 executing program 6:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200004, 0x0)
ioctl$RTC_WIE_OFF(r0, 0x7010)
ioctl$RTC_PIE_ON(r0, 0x7005)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000080))
getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, @phonet={0x23, 0x8, 0x9, 0x8}, @vsock={0x28, 0x0, 0x0, @my=0x1}, @phonet={0x23, 0xd9, 0x80, 0x50}, 0xfc00, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='bridge_slave_1\x00', 0x6, 0x80000000})
mount_setattr(r1, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={0x100002, 0x80, 0x20000, {r1}}, 0x20)
r2 = syz_open_dev$rtc(&(0x7f0000000280), 0x7f, 0x2)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000002c0))
syz_genetlink_get_family_id$fou(&(0x7f0000000300), r1)
ioctl$RTC_WIE_ON(r0, 0x700f)
r3 = syz_open_dev$rtc(&(0x7f0000000340), 0xaedb, 0x200000)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x401})
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x24d)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x4080, 0x0)
ioctl$RTC_PIE_OFF(r4, 0x7006)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0)
ioctl$RTC_PIE_OFF(r5, 0x7006)
inotify_add_watch(r4, &(0x7f0000000480)='./file0\x00', 0x50000410)

12:52:05 executing program 7:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x119202, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000002c0)={{0x7, 0x6}, 'port0\x00', 0x12, 0x10000, 0x40, 0x4567, 0x4, 0xffff, 0x8, 0x0, 0x1, 0x8f})
ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000380)={0x2, 0xffffffff, 0x10001, 0x0, 0x20, 0x9})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@loopback, @local}, &(0x7f0000000400)=0xc)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000440)={{0x7f, 0x8}, {0x7, 0x4}, 0x9, 0x6, 0x80})
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0xc000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000006c0)={0x42c, 0x1, 'client1\x00', 0x1, "a85ab0ac0814de3b", "ef8685b7c061ac245ff6200e5fb1c3e817fdeb7b8c9aea21a3fb1df73ce7de4b", 0x8, 0x6})
r4 = accept4(r2, 0x0, &(0x7f0000000780), 0x80000)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0))
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x4042)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000840)={{0x7, 0x81}, 'port0\x00', 0x10, 0xa0400, 0x6, 0x8001, 0x5, 0x5, 0x7, 0x0, 0x4, 0xf5})
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x4a01, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a80)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/127, 0x7f, 0x1, &(0x7f00000009c0)=""/163, 0xa3}, &(0x7f0000000ac0)=0x40)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4)

[  112.280931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.283635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.285078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.294713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.296908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.298175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.300697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.308483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.314436] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.320783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.331064] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.334157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.343126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.359299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.367175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.381031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.387195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.402196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.411160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.412349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.422263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.424243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.425799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.429866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.431663] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.433295] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.434410] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.436285] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.437749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.440259] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.443898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.445794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.446784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.449541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.451000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.464495] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.480069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.503299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.505634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.507196] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.366998] Bluetooth: hci1: command tx timeout
[  114.367755] Bluetooth: hci0: command tx timeout
[  114.431448] Bluetooth: hci2: command tx timeout
[  114.494973] Bluetooth: hci6: command tx timeout
[  114.496066] Bluetooth: hci7: command tx timeout
[  114.557978] Bluetooth: hci4: command tx timeout
[  114.558779] Bluetooth: hci3: command tx timeout
[  114.622993] Bluetooth: hci5: command tx timeout
[  116.415893] Bluetooth: hci0: command tx timeout
[  116.416446] Bluetooth: hci1: command tx timeout
[  116.478511] Bluetooth: hci2: command tx timeout
[  116.542700] Bluetooth: hci6: command tx timeout
[  116.543219] Bluetooth: hci7: command tx timeout
[  116.607443] Bluetooth: hci3: command tx timeout
[  116.607979] Bluetooth: hci4: command tx timeout
[  116.673024] Bluetooth: hci5: command tx timeout
[  118.461938] Bluetooth: hci1: command tx timeout
[  118.462483] Bluetooth: hci0: command tx timeout
[  118.526985] Bluetooth: hci2: command tx timeout
[  118.591158] Bluetooth: hci6: command tx timeout
[  118.591635] Bluetooth: hci7: command tx timeout
[  118.656856] Bluetooth: hci3: command tx timeout
[  118.657327] Bluetooth: hci4: command tx timeout
[  118.718090] Bluetooth: hci5: command tx timeout
[  120.511159] Bluetooth: hci1: command tx timeout
[  120.511700] Bluetooth: hci0: command tx timeout
[  120.575016] Bluetooth: hci2: command tx timeout
[  120.638867] Bluetooth: hci7: command tx timeout
[  120.639394] Bluetooth: hci6: command tx timeout
[  120.704080] Bluetooth: hci3: command tx timeout
[  120.704607] Bluetooth: hci4: command tx timeout
[  120.766018] Bluetooth: hci5: command tx timeout
[  175.215746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.215891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.221520] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.223564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.229355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.232614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.235461] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.246167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.285429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.288654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.298239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.306067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.310754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.322412] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.328029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.409525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.417161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.421199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.426463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.433422] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.453137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.460249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.477334] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.486971] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.495475] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.496708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.506422] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.513663] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.517022] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.518129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.520968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.523190] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.523210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.541243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.543589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.546396] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.547391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.552163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.554577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.579071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.278042] Bluetooth: hci1: command tx timeout
[  177.341967] Bluetooth: hci0: command tx timeout
[  177.406361] Bluetooth: hci2: command tx timeout
[  177.535008] Bluetooth: hci3: command tx timeout
[  177.597986] Bluetooth: hci4: command tx timeout
[  177.661966] Bluetooth: hci6: command tx timeout
[  177.663013] Bluetooth: hci7: command tx timeout
[  177.725892] Bluetooth: hci5: command tx timeout
[  179.326456] Bluetooth: hci1: command tx timeout
[  179.390163] Bluetooth: hci0: command tx timeout
[  179.454895] Bluetooth: hci2: command tx timeout
[  179.582708] Bluetooth: hci3: command tx timeout
[  179.646141] Bluetooth: hci4: command tx timeout
[  179.709935] Bluetooth: hci7: command tx timeout
[  179.710483] Bluetooth: hci6: command tx timeout
[  179.774382] Bluetooth: hci5: command tx timeout
[  181.373901] Bluetooth: hci1: command tx timeout
[  181.437925] Bluetooth: hci0: command tx timeout
[  181.502320] Bluetooth: hci2: command tx timeout
[  181.630305] Bluetooth: hci3: command tx timeout
[  181.694216] Bluetooth: hci4: command tx timeout
[  181.759049] Bluetooth: hci7: command tx timeout
[  181.759599] Bluetooth: hci6: command tx timeout
[  181.822229] Bluetooth: hci5: command tx timeout
[  183.421926] Bluetooth: hci1: command tx timeout
[  183.487076] Bluetooth: hci0: command tx timeout
[  183.550188] Bluetooth: hci2: command tx timeout
[  183.678173] Bluetooth: hci3: command tx timeout
[  183.742284] Bluetooth: hci4: command tx timeout
[  183.805988] Bluetooth: hci6: command tx timeout
[  183.806538] Bluetooth: hci7: command tx timeout
[  183.870417] Bluetooth: hci5: command tx timeout
[  237.835456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.839240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.849923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.854904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.868981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.968988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.970926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.984527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.011304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.013184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.020337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.023223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.035180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.042124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.046021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.082272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.085182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.086734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.092124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.103577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.132262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.144212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.172044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.183280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.188784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.229052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.240233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.241647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.289488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.295449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.299201] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.303697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.305431] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.310095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.330224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.340629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.394263] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.404647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.418049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.432284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.933918] Bluetooth: hci0: command tx timeout
[  240.126090] Bluetooth: hci1: command tx timeout
[  240.127298] Bluetooth: hci2: command tx timeout
[  240.189980] Bluetooth: hci3: command tx timeout
[  240.254005] Bluetooth: hci4: command tx timeout
[  240.382071] Bluetooth: hci5: command tx timeout
[  240.509941] Bluetooth: hci7: command tx timeout
[  240.574027] Bluetooth: hci6: command tx timeout
[  241.982334] Bluetooth: hci0: command tx timeout
[  242.174902] Bluetooth: hci2: command tx timeout
[  242.175450] Bluetooth: hci1: command tx timeout
[  242.238491] Bluetooth: hci3: command tx timeout
[  242.301923] Bluetooth: hci4: command tx timeout
[  242.430926] Bluetooth: hci5: command tx timeout
[  242.559330] Bluetooth: hci7: command tx timeout
[  242.624001] Bluetooth: hci6: command tx timeout
[  244.030926] Bluetooth: hci0: command tx timeout
[  244.223281] Bluetooth: hci1: command tx timeout
[  244.224232] Bluetooth: hci2: command tx timeout
[  244.286296] Bluetooth: hci3: command tx timeout
[  244.351853] Bluetooth: hci4: command tx timeout
[  244.477966] Bluetooth: hci5: command tx timeout
[  244.606931] Bluetooth: hci7: command tx timeout
[  244.670138] Bluetooth: hci6: command tx timeout
[  246.077950] Bluetooth: hci0: command tx timeout
[  246.270023] Bluetooth: hci2: command tx timeout
[  246.270606] Bluetooth: hci1: command tx timeout
[  246.334888] Bluetooth: hci3: command tx timeout
[  246.397917] Bluetooth: hci4: command tx timeout
[  246.526870] Bluetooth: hci5: command tx timeout
[  246.653998] Bluetooth: hci7: command tx timeout
[  246.718413] Bluetooth: hci6: command tx timeout
[  300.434194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.436723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.440430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.449325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.452789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.500784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.506150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.509525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.513181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.517070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.555324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.566272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.571201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.584252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.588259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.714079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.719655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.728073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.744631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.758573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.057096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.065720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.086300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.109717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.113682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.117417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.121204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.123436] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.126967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.129619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.134754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.140199] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.140366] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.154537] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.165096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.198352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.221227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.221249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.239391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.247120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.527268] Bluetooth: hci0: command tx timeout
[  302.590935] Bluetooth: hci1: command tx timeout
[  302.781974] Bluetooth: hci2: command tx timeout
[  302.845988] Bluetooth: hci3: command tx timeout
[  303.167651] Bluetooth: hci4: command tx timeout
[  303.230238] Bluetooth: hci7: command tx timeout
[  303.293947] Bluetooth: hci5: command tx timeout
[  303.357984] Bluetooth: hci6: command tx timeout
[  304.573971] Bluetooth: hci0: command tx timeout
[  304.637874] Bluetooth: hci1: command tx timeout
[  304.829888] Bluetooth: hci2: command tx timeout
[  304.894346] Bluetooth: hci3: command tx timeout
[  305.215852] Bluetooth: hci4: command tx timeout
[  305.278166] Bluetooth: hci7: command tx timeout
[  305.342351] Bluetooth: hci5: command tx timeout
[  305.406026] Bluetooth: hci6: command tx timeout
[  306.622248] Bluetooth: hci0: command tx timeout
[  306.685940] Bluetooth: hci1: command tx timeout
[  306.877908] Bluetooth: hci2: command tx timeout
[  306.942010] Bluetooth: hci3: command tx timeout
[  307.261975] Bluetooth: hci4: command tx timeout
[  307.325953] Bluetooth: hci7: command tx timeout
[  307.389931] Bluetooth: hci5: command tx timeout
[  307.453904] Bluetooth: hci6: command tx timeout
[  308.669957] Bluetooth: hci0: command tx timeout
[  308.734263] Bluetooth: hci1: command tx timeout
[  308.925887] Bluetooth: hci2: command tx timeout
[  308.990650] Bluetooth: hci3: command tx timeout
[  309.310096] Bluetooth: hci4: command tx timeout
[  309.373885] Bluetooth: hci7: command tx timeout
[  309.438047] Bluetooth: hci5: command tx timeout
[  309.502172] Bluetooth: hci6: command tx timeout
[  362.972730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.975581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.978309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.984071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.986319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.095511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.102171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.116102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.121630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.127007] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.159352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.166521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.168026] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.172281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.175523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.230392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.240345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.243714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.246144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.247159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.255423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.261170] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.262454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.296398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.297219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.297972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.303648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.320650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.320701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.340407] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.524435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.529262] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.533124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.539462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.543166] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.912662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.956469] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.979282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.023115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.043229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.055153] Bluetooth: hci0: command tx timeout
[  365.182027] Bluetooth: hci1: command tx timeout
[  365.246338] Bluetooth: hci2: command tx timeout
[  365.374974] Bluetooth: hci5: command tx timeout
[  365.438093] Bluetooth: hci3: command tx timeout
[  365.629960] Bluetooth: hci4: command tx timeout
[  365.886899] Bluetooth: hci7: command tx timeout
[  366.142012] Bluetooth: hci6: command tx timeout
[  367.101904] Bluetooth: hci0: command tx timeout
[  367.229973] Bluetooth: hci1: command tx timeout
[  367.293873] Bluetooth: hci2: command tx timeout
[  367.421978] Bluetooth: hci5: command tx timeout
[  367.486873] Bluetooth: hci3: command tx timeout
[  367.677889] Bluetooth: hci4: command tx timeout
[  367.934131] Bluetooth: hci7: command tx timeout
[  368.189954] Bluetooth: hci6: command tx timeout
[  369.150603] Bluetooth: hci0: command tx timeout
[  369.278440] Bluetooth: hci1: command tx timeout
[  369.343353] Bluetooth: hci2: command tx timeout
[  369.469890] Bluetooth: hci5: command tx timeout
[  369.534885] Bluetooth: hci3: command tx timeout
[  369.726032] Bluetooth: hci4: command tx timeout
[  369.981906] Bluetooth: hci7: command tx timeout
[  370.237959] Bluetooth: hci6: command tx timeout
[  371.198103] Bluetooth: hci0: command tx timeout
[  371.328169] Bluetooth: hci1: command tx timeout
[  371.390112] Bluetooth: hci2: command tx timeout
[  371.518155] Bluetooth: hci5: command tx timeout
[  371.582979] Bluetooth: hci3: command tx timeout
[  371.774229] Bluetooth: hci4: command tx timeout
[  372.032039] Bluetooth: hci7: command tx timeout
[  372.285976] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
12:57:08  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=b30f96e79d24f230 RDX=0000000019d6cd52
RSI=000000002e6343c6 RDI=00000000483a1118 RBP=ffff888024387090 RSP=ffff888024386f68
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=00000000ffffffff
R12=0000000000000000 R13=ffff888024387080 R14=ffff888024387080 R15=ffff888024387038
RIP=ffffffff84ae7360 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5648000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff22ee50000 CR3=000000002a076000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880160f77f0 RCX=0000000000000001 RDX=1ffff11002c1ef00
RSI=ffff8880160f7f50 RDI=ffff8880160f7800 RBP=ffff8880160f7f50 RSP=ffff8880160f7748
R8 =ffffffff86c1abe4 R9 =0000000000000001 R10=000000000003b124 R11=00000000000c3b44
R12=0000000000000008 R13=ffff8880160f0000 R14=ffff8880160f7f58 R15=ffff8880160f77f0
RIP=ffffffff813506a8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5748000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ef2e1ac4c8 CR3=000000001a2b6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000